Decompilation - Tag - Forensic wheels

Decompilation - Tag - Forensic wheelshttps://polymathmonkey.github.io/weblog/tags/decompilation/index.htmlHugoen-usFri, 26 Jun 2026 09:32:21 +0200HTB: DevAreahttps://polymathmonkey.github.io/weblog/writeups/htb-devarea/index.htmlTue, 23 Jun 2026 12:00:00 +0200https://polymathmonkey.github.io/weblog/writeups/htb-devarea/index.htmlOverview Attribute Value OS Linux Difficulty Medium Category Web + RCE + Privilege Escalation Key CVEs CVE-2022-46364, CVE-2024-45388 Techniques SSRF, RCE, JAR Decompilation, Defensive Shell Analysis DevArea is a medium-difficulty machine demonstrating the importance of chaining multiple vulnerabilities. Initial access requires exploiting an SSRF in Apache CXF to extract credentials, which then enable RCE on a Hoverfly Dashboard instance. The privilege escalation component shows how proper shell script hardening can make seemingly obvious exploits (plugin execution, PATH manipulation) completely ineffective.